Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: qrdoAma0Ql0LNFFXuSNHuGlh3OfNr7N4d8ZkrOAnQ68=
Subject key identifier: 88:3D:AE:C9:14:D1:B8:E7:07:35:CD:17:79:B5:91:92:09:2D:6D:6E
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 019CABD9297AAC517DB3A6A7E08E13AB38AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: JyRErk1iGgtvYUjY4A7jystYqO/6mrfssEhUwmzUUAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:29:7a:ac:51:7d:b3:a6:a7:e0:8e:13:ab:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=883daec914d1b8e70735cd1779b59192092d6d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:1d:43:d4:33:46:a9:cb:81:79:8c:20:b3:
7b:c5:8e:1a:19:e7:83:f8:9d:a9:b3:a9:b6:22:1f:
15:31:98:b2:cf:74:4e:b2:bb:0d:93:66:96:74:b4:
b4:30:8b:97:a0:84:00:fc:37:bd:b8:57:5a:58:26:
a5:6d:bd:01:6d:bf:24:fe:2f:92:d0:7d:23:b3:83:
2d:18:84:e4:89:09:4b:8d:ac:f7:04:7d:f8:ec:ef:
e6:6a:fb:d3:37:2a:00:3e:5d:c5:43:06:d1:e0:0f:
26:f8:95:1b:0a:36:b2:cf:fc:77:e5:a5:a6:a7:69:
e2:3c:e3:33:6b:fe:59:42:3e:30:dd:87:5b:37:cc:
39:30:3f:85:b0:98:a1:19:d3:1f:b4:4d:45:f3:b8:
f6:3e:80:34:3e:12:51:8a:c0:e7:f3:e8:7a:b8:cb:
40:55:89:1b:90:44:9a:c0:d6:cf:67:a6:ea:77:47:
3d:75:9e:1e:94:a1:79:b6:1b:44:59:de:97:3a:2a:
79:53:65:02:99:cb:e5:71:b0:43:fc:d4:12:50:89:
79:c3:ac:84:fe:4c:c0:de:e6:b4:1c:25:97:4f:09:
54:2c:81:3b:8d:fe:12:2b:ed:12:05:6a:36:72:74:
e7:aa:cf:77:84:ef:12:58:1e:ed:a9:53:a3:80:09:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:AE:C9:14:D1:B8:E7:07:35:CD:17:79:B5:91:92:09:2D:6D:6E
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:5f:5f:88:55:9a:29:52:04:e7:d2:65:9c:e0:5a:77:c4:
d0:48:b3:13:bf:83:9c:1d:d2:79:6f:d9:72:13:a6:81:92:a6:
9e:c5:f0:13:21:32:62:91:a2:ef:10:c7:62:0d:9d:db:3b:e5:
2c:07:2c:38:dc:eb:8b:6f:48:d9:b2:41:61:3a:ac:0a:a0:f2:
65:d7:89:e2:dd:e5:a9:68:af:d1:b1:5d:e7:f6:b4:aa:47:f5:
ae:cd:be:15:cb:17:d2:10:c1:c3:94:ec:fb:a1:35:d4:bc:d9:
20:05:25:0c:89:ad:d5:64:5a:5e:dd:f5:00:4c:ea:b8:de:36:
9e:66:f7:6d:8f:98:23:95:9b:e3:49:1c:82:66:a2:35:00:03:
0c:a3:a2:eb:30:db:4a:40:4a:7f:63:15:26:23:b1:51:d6:48:
67:02:1e:fc:77:dd:95:e1:03:e5:54:8f:ee:e3:e0:5c:6d:28:
58:a3:34:46:15:a8:14:a8:e2:71:ad:9f:44:6c:53:25:ba:8b:
ca:a4:10:93:3c:b1:44:4a:b2:94:de:3b:7f:1c:39:de:09:a4:
a4:64:6b:b0:7d:1a:12:06:57:6a:ba:1d:f9:e9:49:e8:8a:8f:
e7:da:d0:8e:91:58:c7:6c:c9:6c:a6:af:c0:ee:b7:43:4f:69:
c8:b3:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:46 2026 by rpki-client